Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: ULUV3YMVE0ZpPXipA7N+NzreGs+qrKA709FGBaj7kl0=
Subject key identifier: 2C:FB:09:CF:6E:8B:02:48:01:9E:7F:DC:F6:AD:DB:56:F6:1E:09:C5
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019768F2C79F93CC309B5EA42C9D144E8AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0A07
Signing time: Fri 13 Jun 2025 11:00:30 +0000
Manifest this update: Fri 13 Jun 2025 11:00:30 +0000
Manifest next update: Sat 14 Jun 2025 11:00:30 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: bU5qzSgfLJ0HEeP543h12aUAzsilhoeAqx3+jLAgbmM=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:c7:9f:93:cc:30:9b:5e:a4:2c:9d:14:4e:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jun 13 11:00:30 2025 GMT
Not After : Jun 14 11:00:30 2025 GMT
Subject: CN=2cfb09cf6e8b0248019e7fdcf6addb56f61e09c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:89:fa:80:91:f0:2b:f7:d9:09:cb:81:07:
b2:c3:25:be:15:69:40:c2:7e:5d:f6:f3:04:04:f2:
c8:5d:6e:e9:98:e9:a9:3e:50:69:02:25:49:d4:b7:
f3:04:33:f9:5a:09:60:1b:d5:28:a0:86:37:48:2e:
0d:fb:97:6a:12:d1:96:cd:f7:a5:79:77:e7:b2:98:
f9:e8:dd:52:ac:88:00:ea:92:47:6d:a0:0b:f9:9b:
6c:fe:75:ec:04:26:52:a0:53:aa:f6:e1:76:2f:cc:
15:27:37:65:1b:ec:75:c6:dd:8d:2b:ea:2c:ae:2a:
fc:9d:9d:90:b9:de:7b:92:bb:8f:28:82:3c:5a:ed:
80:b0:17:0a:64:c0:0b:92:da:e3:ec:38:a3:b4:bd:
d1:c1:eb:53:69:98:57:3f:42:05:f2:8f:8d:e1:f4:
db:de:58:85:bc:e4:6d:2d:59:a8:18:77:e7:f2:c1:
2c:17:40:64:27:c3:3e:88:1c:95:71:f6:86:36:31:
5a:8b:ce:21:53:04:89:0a:88:9f:b8:42:ba:a5:b0:
88:5b:73:5d:fd:91:77:9f:1e:29:3e:e1:30:f6:d0:
48:4f:cf:7c:01:67:dc:93:d3:c1:64:53:c0:2d:0a:
e2:41:37:8d:19:8f:6b:8b:da:6f:ea:e0:5b:90:d1:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:09:CF:6E:8B:02:48:01:9E:7F:DC:F6:AD:DB:56:F6:1E:09:C5
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4c:94:1b:d8:9d:25:77:47:bd:de:95:a5:b0:2d:5d:d0:51:
82:7a:42:26:e2:f7:86:38:3d:aa:35:55:e9:55:62:c1:6f:11:
69:2a:e9:99:e4:4c:8b:db:9d:d9:69:02:d0:0d:3e:04:04:e0:
b5:cb:35:b2:88:20:e3:e4:89:0d:99:6b:3c:c3:47:90:92:87:
cf:6f:94:26:20:fd:e1:93:24:66:e4:6b:a9:41:ad:a4:dc:f8:
28:01:2f:89:5e:bd:3f:dc:88:56:6d:cd:04:65:7f:49:83:f7:
ae:6a:e6:cd:c7:d0:65:87:0f:07:23:81:bf:b8:df:2c:01:6f:
4b:fb:f3:4b:5c:fd:f3:31:41:3f:9a:22:cc:67:96:5d:6c:4a:
07:6e:28:f4:b3:7b:ed:85:bb:50:93:ad:88:ea:23:ac:12:32:
db:aa:8e:4c:c7:a5:74:92:aa:f8:bd:13:6a:20:be:64:c8:da:
44:4f:5a:65:c0:b8:93:e4:54:8f:1d:f6:e3:8b:e1:b9:ac:01:
25:92:c5:09:38:89:a8:c0:5e:25:65:44:63:e1:c2:e5:43:39:
ca:f6:4e:c7:2d:d7:1e:9c:30:bf:b8:77:d0:82:cb:98:7f:f8:
73:6a:9c:81:42:c2:47:9a:b5:9b:e9:49:e7:55:b7:d3:87:f5:
b6:3b:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:02 2025 by rpki-client